EIP-2026-111181

The exploit demonstrates a remote file inclusion (RFI) vulnerability in Zorum by manipulating the 'gorumDir' parameter in include.php to load arbitrary PHP scripts from an external server. This allows remote command execution on the vulnerable host.